Last updated: 1 November 2026
Data controller
The controller of your personal data is Estetyka Urody Joanna Kowalik, ul. Wyzwolenia 2/1a, 10-106 Olsztyn, Poland, e-mail: estetykaurody@op.pl, tel. +48 518 139 014.
What data I process and why
Contact form — your name, phone, e-mail and the content of your message, so that I can answer your question. Legal basis: my legitimate interest, i.e. handling correspondence (Art. 6(1)(f) GDPR). I keep the data until the matter is closed, no longer than 12 months.
Training enquiry — your name, phone, e-mail, preferred date and the content of your message, so that I can arrange the training. Legal basis: steps taken before entering into a contract (Art. 6(1)(b) GDPR). If no contract is concluded, I keep the data for no longer than 12 months.
Booking via Booksy — bookings are handled by Booksy, which is a separate data controller. See the Booksy privacy policy. I receive the data needed to provide the service (name, phone, chosen treatment) — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Newsletter — your e-mail address, to send news and offers once a month. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time — just e-mail estetykaurody@op.pl.
The IP address of the device you submit the form from is kept in the server’s memory for about 10 minutes to protect the forms from spam (Art. 6(1)(f) GDPR). I do not store it anywhere else.
Treatment records — information about your skin and contraindications is collected at the clinic, in writing, before a treatment. It is necessary to perform the service safely and is stored in line with the law.
Who I share data with
I do not sell your data or share it for marketing purposes. Access is limited to providers that help me run the website and the clinic: Digitalna (running the website and forms), DigitalOcean (hosting of the website and forms on a server in Frankfurt), Google (the spreadsheet with newsletter addresses), Brevo (sending messages from the forms), Booksy (bookings) and the e-mail provider — each under a contract and only to the extent necessary.
Using Google, DigitalOcean and Brevo services may involve transferring data outside the European Economic Area. This is done on the terms provided for in the GDPR, e.g. on the basis of standard contractual clauses.
Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, port it, object, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). You may also lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise these rights, write to estetykaurody@op.pl. I will reply within a month at the latest.
Cookies and external connections
This website does not use tracking, advertising or analytics cookies and does not collect information about your behaviour. There is no Google Analytics, no advertising pixels and no social media plug-ins.
For the site to work and look as intended, your browser fetches two things from external servers: Google Fonts (fonts.googleapis.com, fonts.gstatic.com) and OpenStreetMap map tiles in the Contact section (tile.openstreetmap.org). During that connection the providers receive technical data about your browser, including your IP address. Their rules: Google privacy policy, OpenStreetMap Foundation privacy policy.
Links to Booksy, Facebook, Instagram, TikTok and Prezentmarzeń lead to external services with their own privacy rules.
Contact about your data
For any matter concerning your data, write to estetykaurody@op.pl or call +48 518 139 014. You can also visit the clinic: ul. Wyzwolenia 2/1a, Olsztyn, Mon–Fri 10:00–19:00, Sat 10:00–15:00.
Changes to this policy
If I change the way data is processed (e.g. add visitor statistics), I will update this document and the date at the top of the page.